Skip to content

Azure SQL DB must generate audit records when unsuccessful attempts to access security objects occur.

An XCCDF Rule

Description

Changes to the security configuration must be tracked. This requirement applies to situations where security data is retrieved or modified via data manipulation operations, as opposed to via specialized security functionality. In a SQL environment, types of access include, but are not necessarily limited to: SELECT INSERT UPDATE DELETE EXECUTE

ID
SV-255351r961791_rule
Version
ASQL-00-013000
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Deploy an Azure SQL Database audit.

Refer to the supplemental file "AzureSQLDatabaseAudit.txt" PowerShell script.

Reference: 
https://docs.microsoft.com/en-us/powershell/module/az.sql/set-azsqlserveraudit">https://docs.microsoft.com/en-us/powershell/module/az.sql/set-azsqlserveraudit